BWStaffAdmin[.]exe | Triage

Resubmissions

12/01/2023, 13:21

230112-qlsh1aga89 3

12/01/2023, 13:18

230112-qkb5maga83 3

Sharing

Copy URL Twitter E-mail

General

Target

BWStaffAdmin.exe
Size

44KB
MD5

6242ea162a7b14933f228baded7fcc42
SHA1

95a3f065f44b70b402877ae9141746e1399fcd24
SHA256

c273846916ff800772a66719e0aa1d3278dbcde573feb853a24b5436ca8deda7
SHA512

faaa6026c8adcf5df06fbf8c0372f1b03d7b14a150330b03ba627b09fd768dccae100d968a0ebf03c73f06135180c62982e721f7215f528ca0a30ed47febcf28
SSDEEP

768:LzUSJqYtd4TGF1PeaH2l4R21PCUWJBPnQqD1YF4uzJ:Lp0Ytd4TGTPecmW21PmJBrOzJ

Score

N/A

Malware Config

Signatures

Files

BWStaffAdmin.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ